NVD Vulnerabilities

Severity Distribution

Publication Trend

Vulnerability Database

CVE ID Description Published Base Score Attack Vector Severity Actions
CVE-2026-93316 If BuildKit daemon is started with --cdi-disabled it can lead to daemon panic when builds try to use CDI devices. This can happen maliciously or by ac... 2026-10-05 7.1 NETWORK HIGH NVD
CVE-2026-78413 Velociraptor allows collection of VQL queries packaged into Artifacts from endpoints. These artifacts can be used to do anything and usually run with ... 2026-10-05 5.5 NETWORK MEDIUM NVD
CVE-2026-78411 Velociraptor's SetClientMetadata used the wrong permission check to enforce setting metadata on the server. This allows a user with LABEL_CLIENTS perm... 2026-10-05 6.5 NETWORK MEDIUM NVD
CVE-2026-102576 A flaw was found in Quay. A remote attacker could trick a user into logging in through a crafted link, resulting in cross-site scripting (XSS). Becaus... 2026-10-05 4.2 NETWORK MEDIUM NVD
CVE-2026-102295 A flaw was found in Quay. A cross-site scripting (XSS) vulnerability in the OAuth callback handler allows a remote attacker to execute arbitrary JavaS... 2026-10-05 5.4 NETWORK MEDIUM NVD
CVE-2026-101919 A flaw was found in the HyperShift operator. The operator copies user-provided Kubernetes configuration (kubeconfig) secrets directly into the privile... 2026-10-05 8.8 NETWORK HIGH NVD
CVE-2026-86671 In Eclipse Che versions 7.29.0 and later, the GET `/api/scm/resolve` and `POST /api/factory/resolver` endpoints pass an attacker-controlled URL to `UR... 2026-10-05 8.4 NETWORK HIGH NVD
CVE-2026-78412 Velociraptor's WatchEvent gRPC API can specify the OrgId of the org from which events should be streamed. The server checks the API permissions agains... 2026-10-05 4.9 NETWORK MEDIUM NVD
CVE-2026-102779 Joomla Extension - joomlafry.com - Unauthenticated forced execution of published automation tasks in TF Content 2.9.0 - 2.9.4 - The extension exposes ... 2026-10-05 6.9 NETWORK MEDIUM NVD
CVE-2026-102777 Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0 - The Google Photos pick... 2026-10-05 6.3 NETWORK MEDIUM NVD
CVE-2026-102780 Joomla Extension - joomlafry.com - Unauthenticated cross-record publication and mass assignment in TF Content 2.9.0 - 2.9.4 - The extension unconditio... 2026-10-05 6.9 NETWORK MEDIUM NVD
CVE-2026-102778 Joomla Extension - svenbluege.de - Cross-site scripting and open redirect on the share mini page in Event Gallery extension < 6.6.0 - The page a share... 2026-10-05 5.3 NETWORK MEDIUM NVD
CVE-2026-102776 Joomla Extension - svenbluege.de - Cross-site request forgery of list tasks of the backend in Event Gallery extension < 6.6.0 - Eight tasks which the ... 2026-10-05 5.1 NETWORK MEDIUM NVD
CVE-2026-102775 Joomla Extension - phoca.cz - Authorisation bypass through user-controlled key (IDOR) in Order View in Phoca Cart 5.0.0 - 6.1.8 - Phoca Cart's order-f... 2026-10-05 8.7 NETWORK HIGH NVD
CVE-2026-102428 Joomla Extension - ordasoft.com - Unauthenticated SQL injection in OrdaSoft Joomla CCK < 8.3.16 - The order column for records was user provided and n... 2026-10-05 9.3 NETWORK CRITICAL NVD